Our website uses cookies so we can analyse our site usage and give you the best experience. Click "Accept" if you’re happy with this, or click "More" for information about cookies on our site, how to opt out, and how to disable cookies altogether.

We respect your Do Not Track preference.

Keep it professional, don't snoop Jasmine Harding
10 February 2020 at 11:27

Organisations such as banks and GPs have access to a lot of personal information about their clients and patients. Unfortunately, sometimes employees with access to this information overstep the line. In recent years, we have received many complaints about situations where that line has been crossed.

Jon Duffy leaves OPC to head Consumer NZ John Edwards
4 February 2020 at 11:42

I am very sad to announce the resignation of my Assistant Commissioner, Jon Duffy.

Breach Case 11: Open Sesame! Securing customer information against easy access Neil Sanson
4 February 2020 at 09:30

If organisations rely on secret passwords to secure customer’s information, they need to ensure they are near-on impossible to guess. In the story Ali Baba and the Forty Thieves, Ali overhears the secret password “open sesame!” outside a cave of wonders and after repeating it, gains access to a treasure trove. Secrets, like security measures, only protect people if no one overhears or guesses them.

Handling workplace bullying complaints Feilidh Dwyer
28 January 2020 at 13:55

According to WorkSafe, as many as one in three New Zealand workers report being bullied or harassed at work every year.

Data Protection Day 2020 Charles Mabbett
28 January 2020 at 08:56

Nearly 40 years ago, the human rights body, the Council of Europe, introduced Convention 108. It required all signatory nations to take the necessary steps in their domestic legislation to ensure that fundamental human rights would be respected in the processing of personal information.

Teachers and Instagram: A risky mix? Charles Mabbett
24 January 2020 at 11:59

Is it wrong for teachers to post images of the children they teach on their personal Instagram or Facebook profiles? We were asked this question by a journalist last month.

Privacy 2.0: GDPR, territorial scope and the Privacy Bill Joanna Hayward
24 January 2020 at 11:38

This is the third update in our Privacy 2.0 series.

APPA's 52nd Forum: Privacy in the eye of the typhoon Jon Duffy
9 January 2020 at 14:32

Assistant Privacy Commissioner Jon Duffy reflects on his December trip to Cebu, Philippines, alongside Commissioner John Edwards, to attend the 52nd Asia Pacific Privacy Authorities (APPA) forum (Dec 1-2, 2019).